https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53506#M179719 <P>I disabled the script in the ../local/inputs.conf file.</P> Thu, 06 Sep 2012 19:38:39 GMT MasterOogway 2012-09-06T19:38:39Z https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53502#M179715 <P>I have been seeing terrible search time results of late and found Splunk to be running <BR /> SplunkDeploymentMonitor/bin/scripted_inputs/dm_backfill_factory.py</P> <P>Continuously which in turn chews up resources. When comparing this installation against a "like" install the other install does not run this Python script. What is the reason this might be running? I am looking for a good reason to turn it off without interrupting anything else within Splunk.</P> <P>So far I have come up empty on what is causing it to run. </P> <P>Thoughts?</P> Mon, 28 Sep 2020 12:23:34 GMT https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53502#M179715 MasterOogway 2020-09-28T12:23:34Z https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53503#M179716 <P>It's the script that backfills the Deployment Monitor Index.</P> <P>If you're deployment monitor is already populated, you can disable it.</P> <P>AFAIK the only way to launch it is to hit the button in the Deployment Monitor app.</P> Thu, 06 Sep 2012 19:18:25 GMT https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53503#M179716 dart 2012-09-06T19:18:25Z https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53504#M179717 <P>I am trying to find a way to disable the script but haven't found a way yet. </P> <P>I disabled the dm_backfill.conf - disabled=1 but that failed.</P> <P>33d22d46-a353-4972-9682-3cf55625e013]<BR /> dedup = 0<BR /> earliest = 1340776800.0<BR /> latest = 1341986400.0<BR /> maxjobs = 1<BR /> namespace = SplunkDeploymentMonitor<BR /> reverse = 1<BR /> saved_search = All indexers - regenerator<BR /> seed = 1342017493.05<BR /> status = 2<BR /> totaljobs = None<BR /> disabled = 1</P> <P>....followed by a restart of Splunk, but it is still running. I want to have the Deployment Monitor running, just not this script, so I need to leave this enabled in the app.conf. Nothing to turn it off in the UI.</P> <P>Any other thoughts on turning this script off short of uninstalling and reinstalling?</P> Thu, 06 Sep 2012 19:31:40 GMT https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53504#M179717 MasterOogway 2012-09-06T19:31:40Z https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53505#M179718 <P>Found it in the inputs.conf</P> <P>[script:///emat/splunk/etc/apps/SplunkDeploymentMonitor/bin/scripted_inputs/dm_backfill_factory.py]<BR /> disabled = false<BR /> interval = 15<BR /> passAuth = admin</P> <P>Turning to disabled = true</P> Mon, 28 Sep 2020 12:23:36 GMT https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53505#M179718 MasterOogway 2020-09-28T12:23:36Z https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53506#M179719 <P>I disabled the script in the ../local/inputs.conf file.</P> Thu, 06 Sep 2012 19:38:39 GMT https://community.splunk.com/t5/Splunk-Search/What-would-cause-the-dm-backfill-factory-py-to-run/m-p/53506#M179719 MasterOogway 2012-09-06T19:38:39Z